Skip to content

Ilyas Zh.

@bobConnected with DSML. This person's Telegram account has been confirmed through DSML Kazakhstan.

Backend, Security, Cryptography engineer

Cryptography, LLM, author of Ilyazh web3e2e, programming from 7th grade, math, make solutions for the problems, turning idea into product

Open to

Mentoring othersJoining competitions & hackathonsFunding & grantsResearch collaborationStartup collaboration

Career

Experience: 4 years

Experience

Founder and Sole Engineer

Stvor

Cryptographic verification for AI-agent payments.

Present

Built Stvor alone, covering its cryptographic core, APIs and tools; added fail-closed payment verification and Ed25519 support after integration testing.

• Built Stvor around a simple problem: an AI agent can state one payment intention while a different transaction is executed. The system records the intention, checks the transaction, and issues a signed Trust Receipt. • Built the product alone, including the cryptographic core, REST API, TypeScript SDKs, CLI, browser verifier, key registry, authentication, rate limiting, audit logging, documentation, and test vectors.

Independent Cryptography Researcher

Independent

Designed a post-quantum hybrid messaging protocol and zero-dependency SDK; published the work as IACR ePrint 2025/1713.

• Wrote and published Ilyazh-Web3E2E, a post-quantum hybrid protocol for forward-secure decentralized messaging, as IACR ePrint 2025/1713. • Designed the handshake and implemented a zero-dependency SDK using X25519, ML-KEM-768, authenticated identities, AES-256-GCM, and Double Ratchet rekeying.

Security Research

MorpheusAI

Identified two TEE attestation issues, provided attack paths and suggested fixes, and received a total bounty of 105 USD after confirmation.

• Reviewed the TEE attestation code and found two issues: a prefix-only GPU binding comparison and a silent fallback that skipped RTMR golden-value checks when the registry was unavailable. • Sent the team the attack paths, proof-of-concept details, and suggested fixes. The findings were confirmed and paid with a total bounty of 105 USD.

Web3 Specialist

Not specified

Present

Worked on Web3 integrations and smart-contract-adjacent development in a production context.

• Worked on Web3 integrations and smart-contract-adjacent development in a production context.

Education

Cryptography and computer science

Independent study

2018

Selected projects

Stvor

Cryptographic verification for AI-agent payments. Public API, SDKs, CLI, browser verifier, test vectors, and open-source core.

Open project

IACR ePrint 2025/1713

Post-quantum hybrid protocol for forward-secure decentralized messaging.

Open project

elizaOS PR #9297

Merged contribution adding Stvor agent commerce to the third-party plugin registry.

Skills

Threat modelingProtocol designAPI designSDK designIntegration debuggingTechnical documentationApplied cryptographyKey managementFail-closed designTEE attestationResponsible disclosureAuditabilityTypeScriptNode.jsPythonREST APIsSQLiteDockerFly.ioLinux